Skip to main content

Proliant Ml10 Gen9 Server Firmware

2 CVEs product

Monthly

CVE-2017-5689 May 02, 14:59 CRITICAL POC KEV PATCH THREAT Act Now

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Privilege Escalation Siemens Intel Proliant Ml10 Gen9 Server Firmware Simatic Itp1000 Firmware +35
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
94.2%
Threat
7.8
CVE-2018-7112 Dec 03, 15:29 MEDIUM This Month

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft HP Proliant Ml10 Gen9 Server Firmware Integrated Lights Out 3 Firmware +99
NVD
CVSS 3.0
5.5
EPSS
0.7%
EPSS 94% 7.8 CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Privilege Escalation Siemens Intel +37
NVD Exploit-DB
EPSS 1% CVSS 5.5
MEDIUM This Month

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft HP +101
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy